Cisco Router 2901 - crypto isakmp command unavalible

[nabilomar1]

Hello everyone,

I'm configuring remote access vpn, and i'm unable to find the isakmp command. What kind of security license do i need to get to solve this problem?

[Mark Malone]

Hi You need a K9 image on it too for crypto  , do you have that running ?

you can check what its currently running in show version

Index 2 Feature: securityk9
        Period left: Life time
        License Type: Permanent

[nabilomar1]

my crypto is running, but i can't find the isakmp.

R2(config)#crypto ?

  key  Long term key operations

  pki  Public Key components

[Mark Malone]

You don't have an enabled security license , it needs to say activated or permanent

[nabilomar1]

here is my show license:

Index 2 Feature: securityk9                     

Period left: Not Activated

Period Used: 0  minute  0  second  

License Type: EvalRightToUse

License State: Not in Use, EULA not accepted

License Count: Non-Counted

License Priority: None

[Rahul Govindan · Accepted solution]

Do this:

conf t

license boot module c2900 technology-package securityk9

Accept EULA

Reboot

You can use the evaluation version for 8 weeks. If license is purchased, it will show up as permanent and can be used forever.

[nabilomar1]

Thank you very much!

[Rahul Govindan]

You would need the seck9 license to run ipsec.

http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html#wp9000791

[nabilomar1]

does it work with 2901?

[Rahul Govindan · Accepted solution]

Yes, the licensing guide above is for the 2900 series (ISR G2) routers.

SECK9

Offers the security features found in Advanced Security IOS image on ISR 1800,2800 and 3800 e.g. IKE v1 / IPsec / PKI, IPsec/GRE, Easy VPN w/ DVTI, DMVPN, Static VTI, Firewall, Network Foundation Protection,GETVPN etc.

[nabilomar1]

Thank you very much!